Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33322d3332203d3e20323638333038.roa
File:                     323830343a346632383a3a2f33322d3332203d3e20323638333038.roa (raw, json)
Hash identifier:          EnWvl/3UXsibiJbguI9VrQLtpUsXkzDwWzgCKXKB1JY=
Subject key identifier:   C0:C3:C6:DC:B7:C1:8D:02:C9:BE:8F:D6:50:82:FE:8A:68:F1:90:BE
Certificate issuer:       /CN=879D057B82DAB7D3B27DF8C0E310FFAD535B18A8
Certificate serial:       16F7A8D385FDFAE7F1B3C56E7F01A20F8870ED4E
Authority key identifier: 87:9D:05:7B:82:DA:B7:D3:B2:7D:F8:C0:E3:10:FF:AD:53:5B:18:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33322d3332203d3e20323638333038.roa
Signing time:             Mon 07 Apr 2025 20:51:49 +0000
ROA not before:           Mon 07 Apr 2025 20:46:49 +0000
ROA not after:            Mon 06 Apr 2026 20:51:49 +0000
asID:                     268308
IP address blocks:        2804:4f28::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.crl
                          rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 04:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f7:a8:d3:85:fd:fa:e7:f1:b3:c5:6e:7f:01:a2:0f:88:70:ed:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879D057B82DAB7D3B27DF8C0E310FFAD535B18A8
        Validity
            Not Before: Apr  7 20:46:49 2025 GMT
            Not After : Apr  6 20:51:49 2026 GMT
        Subject: CN=C0C3C6DCB7C18D02C9BE8FD65082FE8A68F190BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:46:4f:00:04:71:dc:bc:ed:8c:04:d1:80:81:
                    3d:90:71:1d:8d:58:4a:54:e3:19:24:60:db:84:e6:
                    1b:25:ca:55:6b:90:bc:70:f8:7a:5b:8d:23:e9:1b:
                    01:0b:1b:b7:52:77:4c:33:09:14:9c:5b:e8:e4:6f:
                    37:d4:ec:04:5c:98:2a:33:fd:76:ea:5f:b6:fc:6a:
                    36:73:cd:5a:a9:42:e8:4b:7b:01:1f:38:5a:1a:6a:
                    79:54:bf:89:7e:6d:28:87:64:3d:65:6f:4f:4c:63:
                    9c:7f:da:82:90:28:62:ae:a2:51:23:4a:45:55:87:
                    c4:dd:14:b6:0b:d3:33:3a:44:5f:58:8f:f9:e0:f1:
                    33:db:b0:e1:32:01:18:ad:f4:4e:7c:91:8f:17:4c:
                    9b:63:9e:b7:6f:4a:57:ca:c6:c8:f0:df:b5:02:ad:
                    e0:1f:76:de:6e:92:32:4c:04:48:95:b0:b7:b9:24:
                    46:44:b6:c8:59:92:2f:b9:d6:7d:78:01:b2:b9:3e:
                    70:42:13:cb:ba:b6:4a:55:d1:8d:8e:a5:86:76:68:
                    66:d6:8b:dc:1f:b8:2e:48:19:01:61:36:5b:73:93:
                    c8:da:98:4d:da:b0:7e:e0:0c:33:69:44:87:ae:f7:
                    70:10:7e:0d:ed:a6:fa:2e:79:1a:2d:dc:42:e2:53:
                    11:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C3:C6:DC:B7:C1:8D:02:C9:BE:8F:D6:50:82:FE:8A:68:F1:90:BE
            X509v3 Authority Key Identifier:
                keyid:87:9D:05:7B:82:DA:B7:D3:B2:7D:F8:C0:E3:10:FF:AD:53:5B:18:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33322d3332203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f28::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:5f:0a:ec:39:59:ff:82:aa:6e:63:9a:61:2d:a7:8c:e4:e1:
         f0:4e:ad:09:4b:80:4b:e6:a5:d9:8a:3e:b8:1b:55:ea:53:90:
         c5:0e:c4:08:db:95:f8:db:53:86:4e:19:6b:72:98:3e:ef:51:
         c6:1e:65:9e:14:e6:2a:b4:ca:52:5d:69:47:b3:f5:23:2d:83:
         eb:b0:3f:a3:af:0b:11:79:77:ab:d7:a9:fe:4a:9c:57:db:b8:
         fa:52:77:76:f1:b1:90:4e:96:79:21:10:03:3e:5d:11:79:c8:
         8b:a4:62:23:62:c1:25:ef:4c:c1:a7:00:8d:bb:e6:48:90:25:
         02:38:d7:9b:f9:b0:ea:07:d4:98:bc:48:d6:23:e1:9d:31:4c:
         31:55:bd:15:3f:12:ab:5e:46:b3:23:ce:4e:48:1e:da:93:c4:
         25:6b:00:3f:d1:eb:49:28:64:56:c2:39:8a:da:c1:82:49:9a:
         e2:53:07:a4:8d:e8:ef:a2:5d:86:69:a2:c9:ca:06:5e:f6:ea:
         b0:2a:bf:ed:c0:00:4d:ee:dd:a8:b3:e7:31:83:3c:b1:31:e1:
         58:af:1e:70:34:ee:74:bb:e5:30:24:e9:f3:e5:ba:96:60:65:
         ef:f4:5c:40:b2:09:2d:a4:09:2e:84:3b:3b:c7:16:f3:65:cc:
         16:f6:f1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:37:40 2025 by rpki-client